A vulnerability in Gitea allows unauthorized users to delete attachments from repositories they cannot access, posing a risk to data integrity.

This is an improper access control vulnerability (CWE-284) occurring within the attachment deletion functionality. An authenticated user can bypass repository permission checks by manipulating the request context, effectively performing unauthorized deletions.

Successful exploitation results in the unauthorized deletion of files from repositories, which directly impacts data integrity and project availability. With a CVSS score of 7.5, this high-severity flaw enables malicious actors to disrupt development workflows or remove critical documentation, potentially causing significant operational downtime or loss of intellectual property.

Immediate Action: Upgrade Gitea to version 1.25.4 or higher immediately to apply the required repository context verification fixes.

Proactive Monitoring: Review application access logs for unusual patterns involving attachment deletion requests, particularly those originating from users with limited or recently revoked repository permissions.

Compensating Controls: Ensure that repository-level access control lists are strictly enforced and consider implementing Web Application Firewall (WAF) rules to inspect and block suspicious API calls targeting the attachment management endpoints.

Public Exploit Available: Unknown

Given the potential for unauthorized data destruction, organizations using Gitea should prioritize the update to version 1.25.4. Applying this patch is essential to restoring proper access control and ensuring the integrity of stored repository assets.